Abstract: Disclosed herein are an apparatus and method for security policy management, which manages a network access policy in order to integrate distributed security policies and to apply the integrated security policy in a smart grid environment. The apparatus for security policy management includes a rule set generation unit for generating a rule set by converting predefined access policy security rules, acquired from one or more systems, into a document in a standard format, a topology extraction unit for extracting a network topology from a network diagram of the one or more systems, and a standard policy generation unit for generating a standard policy by combining the generated rule set with the extracted topology.

Abstract: Disclosed herein are an apparatus and method for security policy management, which manages a network access policy in order to integrate distributed security policies and to apply the integrated security policy in a smart grid environment. The apparatus for security policy management includes a rule set generation unit for generating a rule set by converting predefined access policy security rules, acquired from one or more systems, into a document in a standard format, a topology extraction unit for extracting a network topology from a network diagram of the one or more systems, and a standard policy generation unit for generating a standard policy by combining the generated rule set with the extracted topology.